Authors - Md Manirul Islam, Md. Mushfiqur Rahman , Sazzad Hossain Abstract - Moving IoT-edge systems to post-quantum security is not as simple as replacing one algorithm with another. Different parts of the system have different security needs. Short-lived telemetry, control messages, firmware updates, and trust records should not all be protected in the same way. Device limits are also very different: a tiny leaf sensor, a capable actuator, a gateway, and a cloud service do not have the same memory, energy, or bandwidth budget. This paper presents an adaptive hybrid classical-post-quantum cryptographic framework for such heterogeneous environments. We make four main contributions. First, we define a four-tier system and threat model for resource-constrained IoT-edge deployments. Second, we describe profile selection as a practical decision problem that balances security, latency, energy, memory, and bandwidth. Third, we propose a small profile catalog, P0 to P4, that maps classical, hybrid, and PQ-first choices to real deployment roles. Fourth, we evaluate the framework through a benchmark-grounded experimental emulation using current standards and published device measurements. The main idea is simple: apply the strongest protection where compromise would hurt most, while keeping weak devices usable in the real world.
Open Zoom